Route Origin Authorization

$ rpki-client -vvf rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4fbba902-60b7-39e7-98e4-f247cea03ecb.roa
File:                     4fbba902-60b7-39e7-98e4-f247cea03ecb.roa (raw, json)
Hash identifier:          prG0tNkxXnPR2UeLvMsCzafbqbUWUwKmFPCzwTiDiCc=
Subject key identifier:   B2:D9:28:5B:ED:14:75:A0:F0:02:64:EC:4F:55:2B:55:77:BB:27:11
Certificate issuer:       /CN=51446bec-6773-47fb-9bf6-b260de4b6968
Certificate serial:       010D0C9F4328583CCCE6297744C2DABA59668C80
Authority key identifier: 3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79
Authority info access:    rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer
Subject info access:      rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4fbba902-60b7-39e7-98e4-f247cea03ecb.roa
Signing time:             Tue 01 Feb 2022 05:00:00 +0000
ROA not before:           Tue 01 Feb 2022 05:00:00 +0000
ROA not after:            Thu 03 Feb 2022 05:00:00 +0000
asID:                     65530
IP address blocks:        2605:9cc0:384::/48 maxlen: 48

Validation:               Failed, unable to get local issuer certificate

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number:
            01:0d:0c:9f:43:28:58:3c:cc:e6:29:77:44:c2:da:ba:59:66:8c:80
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=51446bec-6773-47fb-9bf6-b260de4b6968
        Validity
            Not Before: Feb  1 05:00:00 2022 GMT
            Not After : Feb  3 05:00:00 2022 GMT
        Subject: CN=c14431cd-1e86-4bb9-a76f-7e6a1994b747
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:a2:34:c0:a0:e5:cd:3e:7d:17:78:7c:f0:3c:f8:
                    bf:62:af:88:38:6c:9a:77:50:d8:d7:29:f1:5b:2a:
                    84:32:78:7e:c3:65:45:a1:2a:a5:8d:ae:a1:49:95:
                    57:16:0d:d4:ea:43:b6:58:e4:c5:d2:18:26:cc:d2:
                    76:00:42:19:f9:33:a3:13:53:15:33:2e:a4:f6:69:
                    15:24:5c:af:24:4f:a6:7f:62:95:d8:01:ea:77:68:
                    d0:41:b4:25:62:59:2a:8c:82:14:51:cd:67:f5:e6:
                    f7:c0:ec:22:2b:ca:4c:0e:d2:00:eb:5b:64:45:f9:
                    e4:d1:37:ac:46:6e:bb:dd:9f:5f:f2:6a:cf:85:63:
                    b2:65:61:a9:f1:9b:ef:62:14:51:54:94:fe:5e:04:
                    42:9f:10:ea:5d:d1:ec:cf:60:bf:11:91:f8:46:a0:
                    81:ab:ec:92:93:89:39:66:84:04:49:51:25:df:ca:
                    03:d9:d7:e2:1d:19:9e:1b:59:0e:ca:9e:04:bc:27:
                    94:76:ec:47:90:eb:c5:45:94:60:9b:d2:c0:28:83:
                    a7:d6:b4:5e:10:36:3d:ce:27:0d:c2:24:36:fc:ab:
                    38:3a:9f:26:89:63:c0:a3:84:8e:b4:f0:a4:ad:04:
                    cf:e0:3c:e7:68:e5:4d:0a:bf:06:16:84:e6:8e:d3:
                    41:7d
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                B2:D9:28:5B:ED:14:75:A0:F0:02:64:EC:4F:55:2B:55:77:BB:27:11
            Subject Information Access:
                Signed Object - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/4fbba902-60b7-39e7-98e4-f247cea03ecb.roa

            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968/51446bec-6773-47fb-9bf6-b260de4b6968.crl

            X509v3 Authority Key Identifier:
                keyid:3E:33:1A:03:8A:E5:A8:DA:B0:2F:F9:78:53:91:4C:C2:CC:A5:87:79

            X509v3 Key Usage: critical
                Digital Signature
            Authority Information Access:
                CA Issuers - URI:rsync://rpki.arin.net/repository/arin-rpki-ta/5e4a23ea-e80a-403e-b08c-2171da2157d3/f60c9f32-a87c-4339-a2f3-6299a3b02e29/51446bec-6773-47fb-9bf6-b260de4b6968.cer

            sbgp-ipAddrBlock: critical
                IPv6:
                  2605:9cc0:384::/48

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.arin.net/resources/rpki/cps.html

    Signature Algorithm: sha256WithRSAEncryption
         48:be:c9:f3:35:e9:94:95:c0:0b:b9:03:bc:3b:5c:af:5c:0a:
         d2:73:14:6f:7f:dd:86:06:01:6d:fc:bc:be:ce:6e:42:a7:b1:
         78:54:ac:f0:b7:9d:98:e7:52:32:48:5b:45:0f:b7:a7:c6:91:
         0d:ad:42:7f:ff:be:f2:58:8a:20:b4:4b:ee:6a:4f:d4:a2:b7:
         72:f9:e7:5c:2f:fe:48:f9:24:81:37:18:f3:c0:a3:e8:a9:71:
         04:96:c4:8b:ce:fa:10:d8:9e:9d:a1:49:47:10:a9:71:45:c6:
         53:bb:3b:49:a0:28:d2:05:08:dc:7a:72:05:44:9c:6d:9a:c3:
         9c:0e:89:87:05:86:95:6d:78:7f:5f:ec:62:29:1c:04:86:9b:
         b5:31:d8:ad:f7:95:71:77:8e:d5:05:6f:ff:1e:63:a1:8d:c5:
         ee:5d:a0:7c:29:8e:44:0f:78:85:a3:1d:ca:26:61:e8:6f:a5:
         34:b0:98:5d:2e:49:f0:81:d5:04:3a:39:70:c7:7b:69:dd:03:
         93:f8:90:fd:2f:7d:85:fc:8a:81:e8:f8:53:fa:65:6b:76:92:
         3a:10:da:be:95:60:2e:4d:2c:5d:bc:cd:c6:c0:6c:54:75:cb:
         61:80:89:ab:52:33:3d:01:08:35:67:09:4d:db:e0:ef:2a:2c:
         79:0e:b1:5d
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----